Hi Justin, Most likely, this is due to the new openssl version in unstable.
Lucas On 27/03/20 at 17:15 -0400, Justin Erenkrantz wrote: > James, > > I finally got a Debian sid environment up. However, I'm seeing a different > sets of test failures right now against vanilla serf 1.4.x and trunk (which > works with the scons/python3 in sid without a patch AFAICT) - this is with > 1.4.x branch: > > --- > > == Running the unit tests == > > ...................................................................F......................F..FFF.F............................. > > There were 6 failures: > > 1) test_ssl_handshake_nosslv2: test/test_ssl.c:589: Serf does not disable > SSLv2, but it should! > > 2) test_ssl_missing_client_certificate: test/test_ssl.c:1925: expected > <120172> but was <120171> > > 3) test_ssl_server_cert_with_cn_nul_byte: test/test_util.c:551: expected > <0> but was <120199> > > 4) test_ssl_server_cert_with_san_nul_byte: test/test_util.c:551: expected > <0> but was <120199> > > 5) test_ssl_server_cert_with_cnsan_nul_byte: test/test_util.c:551: expected > <0> but was <120199> > > 6) test_ssl_renegotiate: test/test_ssl.c:1881: expected <0> but was <120199> > > > !!!FAILURES!!! > > Runs: 127 Passes: 121 Fails: 6 > --- > > I'll try to dig into this more over the weekend, but I wonder if I'm seeing > something different than you (or the builder) are...I'll also try to pull > in your patch set against vanilla 1.3.x to see if I can match the reported > error. > > Cheers. -- justin > > On Wed, Mar 25, 2020 at 8:17 PM James McCoy <james...@debian.org> wrote: > > > On Wed, Mar 25, 2020 at 08:57:14AM -0400, Justin Erenkrantz wrote: > > > James, > > > > > > Thanks for the bug report. For reference, the upstream OpenSSL commit > > looks to > > > be: > > > > > > https://github.com/openssl/openssl/commit/ > > > d924dbf4ae127c68463bcbece04b6e06abc58928 > > > > > > I strongly suspect that the patch on our side (against 1.3.x) is > > something akin > > > to below. I'm having trouble getting a test environment up with the > > latest > > > OpenSSL to reproduce, so if anyone can test in the interim, that'd be > > > appreciated. > > > > Latest Debian sid has everything ready to test, although you'll need the > > patch I'm carrying to build since SCons is using Python 3. That reminds > > me, I was supposed to send that to the list awhile back. > > > > > If not, I'll try again as time (and kiddo) permit. > > > > Unfortunately, that didn't have any effect. > > > > Cheers, > > -- > > James > > GPG Key: 4096R/91BF BF4D 6956 BD5D F7B7 2D23 DFE6 91AE 331B A3DB > >